Outt
Sett
Behavioral task
behavioral1
Sample
31fffe07a8091888a03158b1ce4e582b_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
31fffe07a8091888a03158b1ce4e582b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
31fffe07a8091888a03158b1ce4e582b_JaffaCakes118
Size
58KB
MD5
31fffe07a8091888a03158b1ce4e582b
SHA1
1e93613e4417a88f1b4ce920d03c864600f62acc
SHA256
034e535f694fa5438b996d84bdf8800421449779849896624f6db18178776fb1
SHA512
e264466ad1d791e7e5e02fe84bbb95cf17dc2d810a809871fd7a08bf07269779f3020e8ad26575a4915b8c4826a03dce9d88b260b6967f833533b6b4cb8871ba
SSDEEP
768:uDhfiFP8PlmvgSyZgKJHbaZj5qIAvSpVxR1k6AbZguputFn4d7WltfKZCYlBtPvs:2hq9327A9qB6Rm6Mgupu7K7ctfzY+n
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
31fffe07a8091888a03158b1ce4e582b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ